EDPS’ third annual report: time for the EU administration to demonstrate data protection compliance

Today, Peter Hustinx, the European Data Protection Supervisor (EDPS), and Joaquín Bayo Delgado, Assistant Supervisor, presented their third annual report (2006). Set up in 2004, their independent authority has given a wide range of advice, striving for an advanced data protection culture to be developed in the institutions and bodies. Since then, almost 150 prior checks of risky processing systems and 25 opinions on proposals for new legislation have been issued. The EDPS has been alerting the EU administration for some time now that by spring 2007, he will broaden his supervisory activities, and start to inspect and measure results.

Peter Hustinx says: «Since I took office, I have sent the message to the EU administration that data protection is a key condition for success. I have demonstrated that this is equally valid for the institutions and bodies when they process personal data as when new policies are developed. It is now time for the EU administration to demonstrate that it has made substantial progress in complying with data protection obligations».

As a supervisor of the EU administration’s processing of personal data, the main focus in 2006 was on:

 supporting the Data Protection Officers who ensure data protection within their respective institutions/bodies;

 issuing 54 prior check opinions in all the different fields (staff appraisal, medical files, etc.) that are risky for the persons concerned;

 addressing e-monitoring, traffic data retention and data transfers to third countries in surveys;

 conducting an in-depth security audit of Eurodac’s central database.

As an advisor to the European legislator, the EDPS issued an increasing number of opinions. They covered areas such as: the exchange of information in the ‘third pillar’, biometrics in visa, passports and consular instructions, and financial matters. A major concern was that legislation facilitating exchange of data is adopted before an adequate level of protection is guaranteed in the ’third pillar’. The EDPS also intervened in a case before the Court of First Instance on data protection and public access to documents.

EDPS/07/5

Wednesday, 2 May 2007

Source : Europa

Download the Executive Summary

EDPS’ third annual report Summary

Download the Report

EDPS’ third annual report